lualatex: files with permissions -rw-rw-rw-

Bug #1333016 reported by Martin Konôpka
256
This bug affects 1 person
Affects Status Importance Assigned to Milestone
texlive-base (Ubuntu)
Confirmed
High
Unassigned

Bug Description

(1) I have a sample file testfile.tex :

[konopka@notebook tmp] cat testfile.tex
\documentclass[12pt,a4paper]{report}

\usepackage{polyglossia}

\begin{document}
Qwerty.
\end{document}

(2) I run the command
lualatex testfile.tex

Lualatex produces .aux and .pdf files with permissions 666 , which is insecure:
-rw------- 1 konopka konopka 104 2014-06-22 22:26 testfile.tex
-rw-rw-rw- 1 konopka konopka 8 2014-06-22 22:27 testfile.aux
-rw-rw-rw- 1 konopka konopka 3383 2014-06-22 22:27 testfile.pdf
-rw------- 1 konopka konopka 32302 2014-06-22 22:27 testfile.log

If I use a sample file without the option \usepackage{polyglossia} then the permission are all right (600).
Note that I have my umask set to 0077.
It looks that lualatex (with \usepackage{polyglossia}) is ignorant of my umask.

I found a complaint about the files permissions also on page
http://tug.org/pipermail/luatex/2010-September/001998.html

ProblemType: Bug
DistroRelease: Ubuntu 14.04
Package: texlive-luatex 2013.20140215-1
ProcVersionSignature: Ubuntu 3.13.0-29.53-generic 3.13.11.2
Uname: Linux 3.13.0-29-generic i686
ApportVersion: 2.14.1-0ubuntu3.2
Architecture: i386
Date: Sun Jun 22 22:34:02 2014
InstallationDate: Installed on 2014-03-05 (108 days ago)
InstallationMedia: Ubuntu 14.04 LTS "Trusty Tahr" - Alpha i386 (20140304)
PackageArchitecture: all
SourcePackage: texlive-base
UpgradeStatus: No upgrade log present (probably fresh install)

Revision history for this message
Martin Konôpka (martin.konopka) wrote :
information type: Private Security → Public Security
Changed in texlive-base (Ubuntu):
status: New → Confirmed
Changed in texlive-base (Ubuntu):
importance: Undecided → High
To post a comment you must log in.
This report contains Public Security information  
Everyone can see this security related information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.